Build vs Buy Donation Platforms for NGOs: UNHCR Lessons
Crisis fundraising does not wait for a vendor's roadmap. What building UNHCR's global donation platform revealed about the build versus buy decision when launch speed is a governance requirement rather than a preference.
Key Takeaways
- SaaS covers 70 to 80% of what most organizations need. For humanitarian work, the rest is where crisis response lives.
- Fragmentation was the real enemy, not SaaS. Scattered pages, uneven reporting, different security postures per market.
- AI speeds up the building, not the thinking. No tool designs your market governance model.
- Build the core once and scale by configuration. UNHCR went from 9 markets to 35+ without rebuilding.
Our CEO recently argued in Forbes that AI has changed the build vs buy equation. I have seen that play out firsthand. We built UNHCR's global donation platform, and the decision behind it tells a more specific story about what happens when "buy" stops working for organizations where speed is a governance problem, not a design problem.
UNHCR Platform: Key Numbers
- $67M+ processed across 35+ markets
- 2,500+ campaigns launched
- 15-minute campaign launch time
As of December 2025, that platform has processed US$67M+ across 35+ markets, with campaign launch times down to 15 minutes. Here is what drove those decisions and what they mean if you are facing the same ones.
Why NGOs Keep Hitting This Wall
Most donation SaaS tools work fine in steady state. Then an earthquake hits. Or a conflict escalates. Or a funding appeal needs to go live across 12 markets in 3 languages by tomorrow morning. And "simple" becomes "please file a support ticket and we will get back to you within 48 hours."
SaaS tools cover 70 to 80 percent of what most organizations need, and the maintenance burden you avoid usually justifies the features you give up. That math checks out for most businesses. For humanitarian organizations, the missing 20 to 30 percent is where the crisis response lives.
UNHCR supports over 117 million forcibly displaced people worldwide. When a crisis breaks, the fundraising response has to move at the speed of the news cycle, not the speed of a vendor's sprint backlog.
The penalty for being slow is not a missed quarterly target. It is reputational damage at the exact moment the world is watching. This is the heart of the crisis fundraising gap and why speed matters in modern global operations.
What Pushed UNHCR to Build
UNHCR's problem was not that their tools were bad. It was that global fundraising at their scale requires speed and governance across markets. Not one or the other. Both, at the same time, under pressure.
Before the platform, they had scattered campaign pages across multiple markets. Each with its own setup. Inconsistent donor experiences. Uneven reporting. Different security postures. Wasted effort on every rollout. Fragmentation was the real enemy. Not SaaS.
So they partnered with us to build a Drupal-based global donations platform designed for one thing: repeatable speed with centralized governance. The results are detailed in our UNHCR case study, capturing the impact as of December 2025.
Fifteen minutes. Not because someone pulled an all-nighter. Because the system was designed so campaign teams can clone a high-performing campaign, update the content, select a layout, configure the local payment methods, and publish. No code. No ticket. No waiting for engineering. That is what build looks like when it is done right: repeatable workflows that non-technical teams can operate under pressure.
What "ownership" actually meant in practice
Speed without dependency
UNHCR's campaign teams publish using reusable templates and Layout Builder. They create campaigns themselves.
Governance that scales
A Global Admin keeps full visibility from a single dashboard. Adding a new market is configuration, not a rebuild.
Data control
Salesforce sync and Google Analytics Enhanced Ecommerce are connected to the core. This secures data sovereignty and the own vs rent decision.
Verified security
Transaction-level logging and a partnership with Upsun for 99.99% uptime ensure quick deploys during crisis.
Where AI Helps (and Where It Doesn't)
AI has compressed development cycles. A controlled experiment with GitHub Copilot found that developers with AI assistance completed coding tasks 55.8 percent faster. The effect is real and measurable.
But AI speeds up the building. It does not speed up the thinking. No AI tool designs your market governance model or determines who gets access to what across 35 markets. These are human decisions requiring judgment and context.
Dependency and component risk does not shrink. OWASP's Top 10 calls out vulnerable components as a top application risk. NIST's Secure Software Development Framework (SP 800-218) lays out practices for cutting vulnerability risk that your team must manage, not the AI. Furthermore, donation platform fees and hidden costs still apply regardless of development speed. AI shifts the economics: it works best inside a system that already has discipline around governance and security.
Should You Build? A Quick Diagnostic
If you answer "yes" to three or more of these, it is time to seriously look at owning the platform.
Launch dependency
Do urgent appeals need vendor help or long lead times to launch? If your first call is to a SaaS provider, that is a problem.
Payment method rigidity
Do markets need different payment methods that your current tool struggles with? Rigidity costs you market share.
Paying for basics
Are you paying extra for features that feel basic, like localization? For a global nonprofit, these are table stakes.
Data portability
Can you export donor data cleanly? If not, you have a data ownership problem hiding in plain sight.
Security transparency
Can you get straight answers to security questions worth asking? Marketing answers are a red flag.
Consistent reporting
Does leadership need consistent reporting across markets? Each market being an island creates stacking risks.
One critical qualifier: build the core platform once. Scale by configuration. That is the blueprint UNHCR followed. It is how they went from 9 markets to 35+ without rebuilding the foundation.
Where to Go from Here
For NGOs, the build vs buy question was never purely about code. It is about control. When a crisis breaks, you need to publish a campaign in 15 minutes, not petition a vendor for a feature. The teams that figure this out early will have a real edge when the next emergency hits and the world is watching.
Want to see how Vardot built UNHCR's platform, and whether the same model fits your organization?
FAQs
Consider building when speed and governance both matter under pressure. If urgent appeals depend on vendor lead times, markets need different payment methods your tool resists, donor data is hard to export cleanly, or leadership lacks consistent cross-market reporting, the missing 20 to 30 percent of SaaS functionality is likely where your crisis response lives. Three or more "yes" answers signal it is time to evaluate ownership.
The bottleneck is usually process, not technology. UNHCR's teams launch campaigns in roughly 15 minutes because the system lets non-technical staff clone a high-performing campaign, update content, select a layout with Drupal's Layout Builder, configure local payment methods, and publish. No code, no support ticket, no waiting on engineering. Repeatable workflows that teams can operate independently are what make crisis-speed launches possible.
AI compresses development time but not the judgment work. A controlled GitHub study found developers using Copilot completed coding tasks about 55.8 percent faster, yet no AI tool designs your market governance model or decides who gets access across dozens of markets. Component and security risk also persist, as OWASP and NIST guidance make clear. AI works best inside a system that already has discipline around governance and security.
Ownership means control over speed, data, and governance without vendor dependency. In UNHCR's case it meant campaign teams publishing through reusable templates, a Global Admin maintaining visibility from a single dashboard, Salesforce and Google Analytics connected at the core for data sovereignty, and transaction-level logging with 99.99 percent uptime. Adding a new market becomes configuration, not a rebuild, which is how UNHCR scaled from 9 to 35+ markets.